hello all
i do GPO for wallpaper in windows server 2008 r2
and applay good in windows 7 but not apply on windows xp just white wallpaper
second qustion
i want GPO to deny all portal apps and force log off user when cable in unplugged
last question i want more suggests from u to perfect policy to make secure my network cause i thought i hade some advanced user :hackers in my network
best regards

With regard to the wallpaper. Every machine will require the file of the background or screen saver to be saved on the local machine. More than likely the XP machines do not have this.

The logging off of the user when the (network I assume) cable is unplugged is a bit of a tough one. Furthermore if a machine has a failed network card you kind of make supporting this machine a bit of a problem. I would suggest what you do here is apply a Windows Firewall GPO that blocks all incoming and outgoing traffic when the machine is not connected to your LAN.

With regard to securing your network, well there are a host of settings in the GPO. A couple basics would be to ensure users are not local administrators on the PC's. You can turn of cached credentials so users have to login to the domain. Just understand the impact of what you are doing, you could make life hell for laptop users.

0

zizo1982Author Commented: 2013-11-06

firist thanks for answer me
as i unserstand ur answer this feuthers not support in windows xp but any solve suggets to solve this
and about almost all users just domain user not localy but just some manger admin local
and firewall enabled and cash is off
but i want realy mak life hell for some users
can u give me more suggests plz

The features are supported on XP. So for example if the path to you background is c:\windows\picture.bmp you need to make sure the pictures.bmp is in c:\windows on the XP machines.

You could do things in the GPO like disable access too local disks, not allow USB devices, diable access to CD drives, Not allow users to access the control panel and so on. You can lock a machine down to a point where the user will have one shortcut on the desktop and that is the only thing they can run.

0

zizo1982Author Commented: 2013-11-06

how i can deny users put file in his desktop by gpo

0

Featured Post

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise. How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!